The critical infrastructure landscape is changing, and security leaders need a strategy for addressing the evolving challenge of insider threats.